From 6fe1441f128470f4947b1d4ec8c955ce49b3742b Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 21 Jun 2024 14:34:59 +0300 Subject: [PATCH] python3-gunicorn: Upgrade 21.2.0 -> 22.0.0 - use utime to notify workers liveness - migrate setup to pyproject.toml - fix numerous security vulnerabilities in HTTP parser (closing some request smuggling vectors) - parsing additional requests is no longer attempted past unsupported request framing - on HTTP versions < 1.1 support for chunked transfer is refused (only used in exploits) - requests conflicting configured or passed SCRIPT_NAME now produce a verbose error - Trailer fields are no longer inspected for headers indicating secure scheme - support Python 3.12 License-Update: Update license year Signed-off-by: Leon Anavi Signed-off-by: Khem Raj --- ...ython3-gunicorn_21.2.0.bb => python3-gunicorn_22.0.0.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename meta-python/recipes-devtools/python/{python3-gunicorn_21.2.0.bb => python3-gunicorn_22.0.0.bb} (65%) diff --git a/meta-python/recipes-devtools/python/python3-gunicorn_21.2.0.bb b/meta-python/recipes-devtools/python/python3-gunicorn_22.0.0.bb similarity index 65% rename from meta-python/recipes-devtools/python/python3-gunicorn_21.2.0.bb rename to meta-python/recipes-devtools/python/python3-gunicorn_22.0.0.bb index 9fd601c999..e9ad084d46 100644 --- a/meta-python/recipes-devtools/python/python3-gunicorn_21.2.0.bb +++ b/meta-python/recipes-devtools/python/python3-gunicorn_22.0.0.bb @@ -1,11 +1,11 @@ SUMMARY = "WSGI HTTP Server for UNIX" LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://LICENSE;md5=302423eeae97079c633da81b6a5fe35e" +LIC_FILES_CHKSUM = "file://LICENSE;md5=5b70a8b30792a916f50dc96123e61ddf" -SRC_URI[sha256sum] = "88ec8bff1d634f98e61b9f65bc4bf3cd918a90806c6f5c48bc5603849ec81033" +SRC_URI[sha256sum] = "4a0b436239ff76fb33f11c07a16482c521a7e09c1ce3cc293c2330afe01bec63" -inherit pypi setuptools3 ptest +inherit pypi python_setuptools_build_meta ptest SRC_URI += " \ file://run-ptest \